The vulnerability CVE-2025-22343 affects the koter84 wpSOL WordPress plugin through version 1.2.0. It is a Cross-Site Request Forgery (CSRF) issue that enables stored Cross-Site Scripting (XSS) attacks. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker to trick an authenticated user into submitting a forged request that results in stored malicious scripts being injected and executed in the context of the vulnerable application.

Successful exploitation of this vulnerability can lead to stored XSS, which may allow attackers to execute arbitrary scripts in the context of the affected application, potentially compromising user data and session integrity. The CSRF nature means attackers can induce authenticated users to perform unwanted actions without their consent. The combined impact affects confidentiality, integrity, and availability to a limited extent as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is available at this time. Until a fix is released, users should consider disabling or removing the wpSOL plugin or implementing additional CSRF protections at the application or web server level to mitigate risk.